Skip to contentRed Hat Enterprise Linux 8.6 Update Services For Sap Solutions vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-4404Public exploitFix available9.1 Critical
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple use after free in xcf parserCVE-2025-48798Fix available7.3 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple heap buffer overflows in tga parserCVE-2025-48797Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.2 advanced update support +11 more +13 moreGnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdusCVE-2025-5024Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoupCVE-2025-4945Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupCVE-2025-4948Fix available7.5 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS...CVE-2025-31223Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverCVE-2025-46421Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCVE-2025-32911Fix available9.0 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processCVE-2025-32914Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: out of bounds reads in soup_headers_parse_request()CVE-2025-32906Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerCVE-2025-32913Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: denial of service attack to websocket serverCVE-2025-32049Fix available7.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()CVE-2025-26601Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()CVE-2025-26600Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()CVE-2025-26599Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()CVE-2025-26598Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()CVE-2025-26597Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()CVE-2025-26596Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()CVE-2025-26595Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursorCVE-2025-26594Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat builds for red hat openshift 1.3.2, enterprise linux 10, enterprise linux 6 +14 more +16 moreEmacs: shell injection vulnerability in gnu emacs via custom "man" uri schemeCVE-2025-1244Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodCVE-2024-52337Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityCVE-2024-9632Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 7.7 advanced update support +13 more +15 moreNetworkmanager-libreswan: local privilege escalation via leftupdownCVE-2024-9050Fix available7.8 High
- apple ipados, macos, safari +17 more +19 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS...CVE-2023-43010Fix available8.8 High
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root userCVE-2024-45770Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmcd heap corruption through metric pmstore operationsCVE-2024-45769Fix available5.5 Medium
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/writeCVE-2024-4467Fix available7.8 High
- red hat certificate system 10.4 eus for rhel-8, enterprise linux 6, enterprise linux 7 +11 more +13 moreCa: token authentication bypass vulnerabilityCVE-2023-4727Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 moreFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forceCVE-2024-3183Public exploitFix available8.1 High
- clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth serverCVE-2024-3049Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreLibndp: buffer overflow in route information length fieldCVE-2024-5564Fix available8.1 High